Multiple Apple Products Multiple Security Vulnerabilities

Bugtraq ID:	72334
Class:	Unknown
CVE:	CVE-2014-4480 CVE-2014-4496
Remote:	Yes
Local:	Yes
Published:	Jan 27 2015 12:00AM
Updated:	Jan 12 2016 02:16AM
Credit:	TaiG Jailbreak Team and Rennie deGraaf of iSEC Partners
Vulnerable:	Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 Apple Apple TV 5.0 Apple Apple TV 4.4 Apple Apple TV 4.3 Apple Apple TV 4.2 Apple Apple TV 4.1 Apple Apple TV 4.0 Apple Apple TV 2.1 Apple Apple TV 1.0
Not Vulnerable:

Multiple Apple Products Multiple Security Vulnerabilities

Multiple Apple products are prone to multiple security vulnerabilities.

The update addresses new vulnerabilities that affect AppleFileConduit, Kernel, and WebKit components.

Attackers can exploit these issues to bypass security restrictions, disclose information, and perform other attacks.

Multiple Apple Products Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and will not require specific exploit code.

Multiple Apple Products Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Apple Products Multiple Security Vulnerabilities

References:

• Apple iOS Homepage (Apple)
  
• Apple TV Home Page (Apple)
  
• Apple security updates (Apple)